11004 matches found
PT-2020-14789 · Temi · Temi Robox Os +1
Name of the Vulnerable Software and Affected Versions: temi Robox OS versions prior to 120 temi Android app versions up to 1.3.7931 Description: The issue allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests. Recommendations: For temi...
CVE-2020-16211
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by processing specially crafted project files, which may allow an attacker to read information...
Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability
Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. A scheduled meeting template creation vulnerability exists in Cisco Webex Meetings versions prior to 40.7.0. The vulnerability stems from insufficient execution of authorization for scheduled meeting template creation...
PT-2020-14824 · Delta Electronics · Tpeditor
Name of the Vulnerable Software and Affected Versions: Delta Electronics TPEditor versions 1.97 and prior Description: A write-what-where condition may be exploited by processing a specially crafted project file, potentially allowing an attacker to read or modify information, execute arbitrary...
AZL-6390 CVE-2020-15113 affecting package etcd for versions less than 3.5.0-3
In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created etcd data directory and the directory path when provided to automatically generate self-signed certificates for TLS connections with clients with restricted access permissions 700 by using the os.MkdirAll. This functio...
NetApp Active IQ Unified Manager Code Execution Vulnerability
NetApp Active IQ Unified Manager is an ONTAP storage product monitoring and management solution from US-based NetApp. The product supports features such as performance monitoring and secret key management. A security vulnerability exists in NetApp Active IQ Unified Manager versions prior to 9.6 J...
CVE-2020-15467
The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise...
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-46338)
Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...
Cisco Data Center Network Manager Authorization Issues Vulnerability
Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. An authorization issue vulnerability exists in the REST API endpoint in Cisco DCNM...
Mozilla Firefox Remote Code Execution Vulnerability (CNVD-2020-43763)
Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...
Secomea GateManager Trust Management Issues Vulnerability
Secomea GateManager is a remote access server product from Secomea, Denmark. A trust management issue vulnerability exists in Secomea GateManager versions prior to 9.2c that stems from the program's use of hard-coded credentials. A remote attacker can exploit this vulnerability to execute command...
ALPINE-CVE-2020-15705
GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim...
Western Digital WD Discovery Injection Vulnerability
Western Digital WD Discovery is a WD device discovery program from Western Digital. The program supports performing software deliveries, updates, notifications, etc. for WD devices. A security vulnerability exists in Western Digital WD Discovery versions prior to 4.0.251.0. An attacker could...
Mozilla Network Security Services Information Disclosure Vulnerability (CNVD-2020-43765)
Mozilla Network Security Services NSS is a library of functions Network Security Services library from the Mozilla Foundation in the United States. The product provides cross-platform support for SSL, S/MIME and other Internet security standards. A security vulnerability exists in Mozilla Network...
Huawei P30 Information Disclosure Vulnerability (CNVD-2020-46468)
Huawei P30 is a smartphone from Huawei. An information disclosure vulnerability exists in versions prior to Huawei P30 10.1.0.160 C00E160R2P11. The vulnerability stems from the system failing to properly authenticate an application accessing a specified interface. An attacker can exploit the...
MunkiReport SQL Injection Vulnerability (CNVD-2020-42246)
Munkireport is a reporting tool for the Munki software management program. A SQL injection vulnerability exists in the TableQuery.php file in MunkiReport versions prior to 5.6.3. The vulnerability can be exploited by an attacker to execute arbitrary SQL commands by sending a POST request to...
MunkiReport Cross-Site Request Forgery Vulnerability
Munkireport is a reporting tool for the Munki software management program. A cross-site request forgery vulnerability exists in manager/deletemachine/id in MunkiReport versions prior to 5.6.3. An attacker could exploit this vulnerability to delete arbitrary devices from the MunkiReport database...
CVE-2020-7517
A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder Version 1.4.7.2 and older which could allow an attacker to read user credentials...
Cisco SD-WAN vManage Software Backlink Vulnerability
Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A back-link vulnerability exists in the web management interface in Cisco SD-WAN vManage Software versions prior to 19.2.3, which stems from the program's failure to adequate...